6f9561bda6d7bc9ed36dd3fa9e0a6f01e5b4c7c9d8a890e10578dd64d95dddaf

Analysis

max time kernel
150s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 11:08

Target
win64/dnscrypt-proxy.exe
Size 11.5MB
Sample260714-m8zztabs8l
SHA256 6f9561bda6d7bc9ed36dd3fa9e0a6f01e5b4c7c9d8a890e10578dd64d95dddaf
MD5 d6161628df1f4ac04ccf0dba52cab4ee
SHA1 24cf7065f61cd7ebcbe5417f2719a1a83a9a7490
SHA512 e9bd3baa38a7bc74e35ae7203f71af07b962f691de4fb1200cc07882086f4c0e42eded1f252107ac3925eb0fdc0f471fcb3f3cbe3cfec589451d24cc24d5e016
SSDEEP 49152:CxG8Jt8ZlkyOn8BMm/A7zKCZnhB9D0XHNDHC8WEqiTqNlaOJkLD114Ry2RMfN8RL:CxxD8XUdpkLDURRG8RVhTAGPB9xmE
TLSH
T1FCC65A03ECA504E9C5ADD631C963A122BB71BC491B2123D72B60F6247F37BE46EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3620	dnscrypt-proxy.exe

C:\Users\Admin\AppData\Local\Temp\win64\dnscrypt-proxy.exe
"C:\Users\Admin\AppData\Local\Temp\win64\dnscrypt-proxy.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3620